Free ACFE CFE-Investigation Practice Test & Real Exam Questions

Exam Code/Number: CFE-Investigation
Exam Name/Title: Certified Fraud Examiner - Investigation Exam
Certification Provider: ACFE
Corresponding Certification: Certified Fraud Examiner

Exam Questions: 184
Updated On: Jul 08, 2026

Question #17

Tyson, a fraud examiner, is planning an interview with Brianna. the girlfriend of the central suspect in Tyson's investigation. Previous interviews with others have revealed that Brianna tends to be very protective of her boyfriend How should Tyson approach the interview with Brianna?

A. Avoid interviewing Brianna if possible due to Brianna's potential volatility.

B. Provide Brianna with advance notice prior to the interview to inhibit resentment.

C. Conduct the interview with as little notice as possible so Brianna will be unprepared

D. Ask Brianna when she would prefer to be interviewed in an effort to provoke cooperation.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #18

When planning for the interview phase of an investigation, which of the following steps should NOT be taken by the fraud examiner?

A. Prepare a detailed list of questions to ask the subject during the interview.

B. Ensure that the interview is held in a venue where the subject will feel Uncomfortable

C. Review the case file to ensure that important information has not been overlooked

D. Consider what the interview is intended to accomplish and state an objective.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #19

Butler, a Certified Fraud Examiner (CFE), needs to obtain a copy of a statement that the chief executive officer (CEO) of Accord Investments, a venture capital firm, posted on the firm's website sometime last year.
Unfortunately, the quote has been removed from the website. Which of the following resources would be the BEST choice for Butler to consult to find an earlier version of the web page that he needs?

A. The deep web

B. The invisible archives

C. The internet archives

D. The free web

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #20

Which of the following data is the MOST DIFFICULT to recover during a digital forensic examination?

A. Websites visited

B. Communications sent via instant messenger

C. Files that have been overwritten

D. Time and date information about files

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #21

Which of the following statements about how fraud examiners should approach fraud examinations is FALSE?

A. When conducting fraud examinations, fraud examiners should begin with general information that is known and then move to the more specific details.

B. When conducting fraud examinations, fraud examiners should start with specific details and move toward more general information.

C. In most examinations, fraud examiners should start interviewing the least involved candidates and proceed toward those who are potentially more involved.

D. When conducting fraud examinations, fraud examiners should adhere to the fraud theory approach.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #22

Jackson, a digital forensic examiner for a government agency, is conducting a criminal investigation into the alleged embezzlement of funds from the government's Welfare Department (WD). Ginny. a WD employee, is the prime suspect. Jackson obtains a court order authorizing him to seize Ginny's personal computer for forensic examination. Which of the following is the MOST ACCURATE statement?

A. If Ginny's computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process

B. If Ginny's computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data

C. If Ginny's computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interface.

D. If Ginny's computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #23

Assuming that a jurisdiction has prohibited pretexting with financial institutes, which of the following actions would constitute illegal pretexting?

A. Falsely claiming to be the spouse of an account holder to access bank records

B. Digging through a person's trash to obtain their bank account information

C. Withdrawing another person's funds using a stolen bank account number and PIN

D. Making purchases with a credit card account under a fictitious identity

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #24

Janet suspects that a local restaurant is being used as a front business for a criminal operation. Which of the following types of records would be the MOST LIKELY to help Janet discover who owns the restaurant building?

A. Commercial filings

B. Local court records

C. Building permit records

D. Voter registration records

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free ACFE CFE-Investigation Demo

Simply submit your e-mail address below to get started with our free demo of your ACFE CFE-Investigation exam.